News

JavaScript packages with billions of downloads were compromised by an unknown threat actor looking to steal cryptocurrency.
Artificial-intelligence agents—touted as AI’s next wave—could be vulnerable to malicious code hidden in innocent-looking ...
Pro tip, don't install PowerShell commands without approval A team of data thieves has doubled down by developing its ...
Cybersecurity firm HiddenLayer says a new virus can infect popular AI tools, including one widely used at crypto exchange ...
The multitude of Python tools makes for many choices and many potential pitfalls. Streamline your AI projects by ...
A new supply chain attack on GitHub, dubbed 'GhostAction,' has compromised 3,325 secrets, including PyPI, npm, DockerHub, ...
A threat actor targeting exposed Docker APIs has updated its malicious tooling with more dangerous functionality that could ...
Researchers have unveiled a technique to keep AI safeguards intact, even when models are trimmed down for smaller, low-power devices.
CastleRAT and CastleLoader, active since March 2025, spread malware via phishing and GitHub repos, enabling data theft.